CVE-2021-3996

CVE-2021-3996 affects util-linux libmount and allows an unprivileged local user to unmount other users’ filesystems that are world-writable or mounted in a world-writable directory, potentially causing DoS. The Debian security tracker and security advisories note this vulnerability in libmount; D...

CVE-2021-3995

CVE-2021-3995 is a logic error in util-linux’s libmount that allows an unprivileged local attacker to unmount FUSE filesystems or other users’ world-writable mounts, potentially causing DoS. Affected: util-linux (libmount). Root cause: logic flaw in libmount’s unmount handling. Impact: denial of ...

CVE-2021-37600

CVE-2021-37600 affects util-linux up to version 2.37.1, describing an integer overflow that could lead to a buffer overflow in IPC utilities if resource usage drives a large value in /proc/sysvipc/sem. Connected advisories (Debian LTS, Gentoo GLSA, Alpine) confirm the issue and recommend upgradin...

CVE-2022-0563

CVE-2022-0563 affects util-linux chfn/chsh utilities when built with Readline. The Readline library may expose data from the INPUTRC file to unprivileged users, enabling reading of root-owned files and potential privilege escalation. Affected versions are prior to 2.37.4. Remediation noted in mul...

CVE-2001-1494

CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...

CVE-2026-3184

Affects util-linux, specifically the login(1) utility when invoked with -h. The root cause is improper hostname canonicalization, which can modify the supplied remote hostname before setting PAM_RHOST. This weakness can bypass host-based PAM access control rules that rely on fully qualified domai...